Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26E36B9E38A711F1B558C5F7CE1D38B0.roa
File: 26E36B9E38A711F1B558C5F7CE1D38B0.roa (raw, json)
Hash identifier: 0W3IQl9r4GrcwjzV3kczEncSoN6tv9yurfus5RE+7Y8=
Subject key identifier: 17:63:BE:24:53:1B:A7:7B:21:55:70:55:8E:21:E1:C7:E9:F1:06:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C554
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26E36B9E38A711F1B558C5F7CE1D38B0.roa
Signing time: Wed 15 Apr 2026 08:43:19 +0000
ROA not before: Wed 15 Apr 2026 08:43:15 +0000
ROA not after: Wed 06 May 2026 08:43:15 +0000
asID: 271956
IP address blocks: 154.88.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116052 (0x1c554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 08:43:15 2026 GMT
Not After : May 6 08:43:15 2026 GMT
Subject: CN=69df4fa7-8efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:d4:a6:44:93:1c:e6:67:05:ef:8f:19:55:
d2:f5:f9:2e:47:d5:07:d8:24:4f:b2:2b:25:bd:06:
db:07:66:1c:0c:4c:6f:5d:af:0e:b4:16:e7:10:f1:
ed:15:a6:c6:52:af:fa:03:4c:42:a6:46:10:e0:ce:
f3:87:f0:a1:62:89:f8:c7:2c:8b:43:1a:96:f6:ac:
5d:c8:a5:1a:c7:4f:fb:dc:a2:3d:95:08:02:ca:36:
18:8c:2b:bf:b6:81:a3:f9:c0:b6:3e:7e:6b:46:26:
54:fd:4f:aa:e7:03:de:18:20:99:5d:74:a8:b4:b4:
5d:78:ab:5f:05:cb:69:67:90:8c:77:f9:cd:e5:b2:
ed:be:96:b2:4e:f9:5c:5a:0e:11:67:0b:9b:54:e6:
55:cf:d9:be:5c:ae:4a:cd:d4:02:49:3b:6c:e1:c9:
aa:1a:47:84:19:25:0c:4c:73:6b:d6:24:71:db:b0:
8c:55:17:5f:c1:36:ed:a0:13:98:46:d0:9b:d7:a1:
ea:2f:44:5e:62:df:23:32:2c:a4:3d:96:2a:bd:6f:
70:96:75:cc:50:7a:ee:ff:11:a7:86:e7:c5:83:87:
68:6a:ac:f5:d1:c9:76:be:65:4f:0c:b7:af:91:c9:
1e:25:16:7f:88:02:a5:5f:4e:f1:1e:b6:2f:57:ed:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:63:BE:24:53:1B:A7:7B:21:55:70:55:8E:21:E1:C7:E9:F1:06:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26E36B9E38A711F1B558C5F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:2e:01:db:8d:35:c2:89:40:5c:6c:b3:77:1a:ea:a8:e7:08:
82:33:a6:e0:5e:9a:f7:72:02:e8:ff:55:dd:ac:72:0c:b9:b2:
7d:1d:83:43:7b:14:9c:82:37:fc:9e:a3:41:30:df:6b:cd:9a:
50:b3:f4:3e:bb:85:0d:25:cb:cb:c4:fb:34:3b:61:6e:06:88:
ba:92:45:28:a6:13:49:cd:ea:f6:36:ba:f8:c6:d9:41:d2:05:
4a:93:66:d7:ca:11:61:b8:f2:4e:1b:a4:ae:cd:86:02:2e:b4:
98:6e:0b:b8:fe:c0:73:33:72:b3:ab:d5:13:fa:10:7d:86:86:
96:bb:4f:cc:99:df:75:50:59:69:e8:d0:4c:3d:cf:4d:11:33:
f3:37:7e:07:d3:99:fd:6c:55:9d:e4:05:e3:b3:68:19:0f:1a:
30:39:98:58:ed:35:44:58:8a:5b:b7:48:41:32:46:11:7a:66:
f1:58:3b:da:1a:02:e0:d6:30:ab:0e:f3:f7:ca:8a:83:f6:ea:
c2:72:b6:cb:15:27:66:50:22:9a:dc:fc:f2:27:af:19:6c:f9:
e4:68:e0:28:1e:b5:05:34:36:43:c0:22:d5:26:f5:4f:1b:6b:
bf:a2:63:58:eb:fd:78:f4:47:0c:44:8b:ba:77:ed:96:09:8b:
ae:e9:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:40 2026 by rpki-client